Google Chrome 121.0.6167.85/.86 with 17 security fixes; AI features planned

Chrome[German]Google has released updates to the Google Chrome browser in the Stable Channel for Mac, Linux and Windows on January 23, 2024. There were also updates for the Extended Stable Channel. The Chrome browser Android app has also been updated. The updates contain security fixes, some of which are already being exploited. Here is an overview of these updates. Google is also planning to add AI functions to the Chrome browser in the future.


Advertising

Google Chrome (Stable)

The announcement an be found on the Google blog. The stable channel has been updated to version 121.0.6167.85 for macOS and Linux. For Windows, the update updates the browser to version 121.0.6167.85/.86. Google states that 17 vulnerabilities have been fixed and lists the following vulnerability(ies).

  • [$11000][1505080] High CVE-2024-0807: Use after free in WebAudio. Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2023-11-25
  • [$9000][1484394] High CVE-2024-0812: Inappropriate implementation in Accessibility. Reported by Anonymous on 2023-09-19
  • [$6000][1504936] High CVE-2024-0808: Integer underflow in WebUI. Reported by Lyra Rebane (rebane2001) on 2023-11-24
  • [$2000][1496250] Medium CVE-2024-0810: Insufficient policy enforcement in DevTools. Reported by Shaheen Fazim on 2023-10-26
  • [$1000][1463935] Medium CVE-2024-0814: Incorrect security UI in Payments. Reported by Muneaki Nishimura (nishimunea) on 2023-07-11
  • [$1000][1477151] Medium CVE-2024-0813: Use after free in Reading Mode. Reported by @retsew0x01 on 2023-08-30
  • [$1000][1505176] Medium CVE-2024-0806: Use after free in Passwords. Reported by 18 aus China on 2023-11-25
  • [TBD][1514925] Medium CVE-2024-0805: Inappropriate implementation in Downloads. Reported by Om Apip on 2024-01-01
  • [TBD][1515137] Medium CVE-2024-0804: Insufficient policy enforcement in iOS Security UI. Reported by Narendra Bhati of Suma Soft Pvt. Ltd. Pune (India)  on 2024-01-03
  • [N/A][1494490] Low CVE-2024-0811: Inappropriate implementation in Extensions API. Reported by Jann Horn of Google Project Zero on 2023-10-21
  • [TBD][1497985] Low CVE-2024-0809: Inappropriate implementation in Autofill. Reported by Ahmed ElMasry on 2023-10-31

Three vulnerabilities listed above are classified as "High". The browser should therefore be updated immediately, even if the browser updates itself using the automatic update function. You can also update the browser manually (via the menu and the About Google Chrome command). The latest build of the Chrome browser can also be downloaded here.

Google Chrome (Extended Stable)

According to this article, Google Chrome has been updated to version 120.0.6099.268 for macOS and Windows in the Extended Stable Channel. The update contains the same fixes as in the Stable Channel. The update will be rolled out in the coming days.

Chrome for Android 121.0.6167.10

Furthermore, according to this Google post, Google Chrome for Android has been updated to version 121.0.6167.10 and will be distributed via update in the next few days. This version contains stability and performance improvements, as well as the same security fixes as mentioned above for the desktop versions of the browser.

Google adds AI features to Chrome

In an announcement Chrome is getting 3 new generative AI features dated January 23, 2024, Google also announced that the browser will receive AI functions in the future. These AI functions, which are currently still experimental, can already be activated to organize tabs, create custom themes and receive help when writing on the web.

Organize tabs

According to Google, intelligently organizing tabs into tab groups is a helpful way to manage many tabs. With the Tab Organizer, Chrome automatically suggests tab groups and creates them based on open tabs. No idea who needs this, but Google provides an explanation of why you need it: This can be especially helpful when users are working on multiple tasks in Chrome at the same time, such as planning a trip, researching a topic and shopping.


Advertising

To use this feature, right-click on a tab and select "Organize similar tabs" or click the drop-down arrow to the left of your tabs. Chrome will even suggest names and emoji for these new groups so you can easily find them the next time you use them.

Create your own designs with AI

In 2023, Google introduced generative AI wallpapers with Android 14 and Pixel 8 devices. Now, developers are bringing the same text-to-image diffusion model to the Chrome browser so users can personalize their browser even more. Users should be able to quickly create custom themes based on a theme, mood, visual style and color that can be selected. To do this, there is the "Change theme" command in the "Customize Chrome" sidebar and then the "Create with AI" sub-command.

Writing texts on the Internet

The third area where the AI functions are intended to help is writing texts on the internet. To this end, the next version of Chrome will introduce another experimental AI-supported function that will help users to write more confidently on the web. According to Google, this ranges from a well-written review for a restaurant to a friendly response to a party or a formal request for a rental apartment. Personally, I can't imagine where AI will be helping me in the near future. But the Americans or digital natives seem to be very busy. To get started, the user has to right-click on a text field on any website visited in Chrome. The "Help me write" command can then be selected from the context menu. Then enter a few words and the AI will start the writing process for the user. Let's hope the thing doesn't start confabulating, which can be embarrassing.


Advertising

This entry was posted in browser, Security, Software, Update and tagged . Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *

Note: Please note the rules for commenting on the blog (first comments and linked posts end up in moderation, I release them every few hours, I rigorously delete SEO posts/SPAM).